
Error: rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File: fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier: 6mIfXYiIphVSZLol/tkAPhcatMzBoD37lgR6OwHeSRo=
Subject key identifier: B5:F4:F0:7C:42:60:9A:B1:82:2B:67:58:3E:19:C3:18:58:7A:59:D8
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer: /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial: 0292
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number: 0291
Signing time: Sat 24 Oct 2026 04:45:01 +0000
Manifest this update: Sat 24 Oct 2026 04:45:01 +0000
Manifest next update: Mon 26 Oct 2026 04:45:00 +0000
Files and hashes: 1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: Uq3BvZOh+yyA+4m6kaN1vikCV91Rz5PuyGuuOYJI9Tc=)
2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 26 Oct 2026 00:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Validity
Not Before: Oct 24 04:45:01 2026 GMT
Not After : Oct 26 04:45:00 2026 GMT
Subject: CN=6adc37cd-a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:68:c9:f5:09:48:c6:91:20:53:da:d6:5e:
56:a7:d3:02:b4:4a:65:65:50:b8:5b:ec:90:0c:40:
83:0b:f1:e4:91:e0:f9:cc:90:4a:00:48:75:43:10:
b0:90:78:dd:0c:c2:06:bd:04:36:53:fd:c7:52:5d:
81:11:99:58:44:a6:55:9d:04:fe:81:a6:1c:0d:bb:
69:5b:b0:28:77:74:62:e3:02:0b:06:79:b9:7d:c5:
e2:4d:b0:2d:df:95:1c:6a:45:a6:3e:c9:26:0a:99:
4b:28:b5:75:46:bd:36:6a:91:cb:24:64:02:c3:76:
cb:f4:d4:a1:96:a3:2a:95:8b:81:cb:97:13:ad:3a:
cc:40:67:a0:0b:b4:8e:d6:32:4a:ea:c0:ff:c1:8a:
33:d6:e1:e0:0f:66:ac:21:cb:25:0b:7b:13:92:ac:
bf:95:38:77:99:a9:40:62:d7:80:ac:4f:e2:52:26:
81:ce:13:d2:fe:e3:f0:eb:49:9f:0e:d4:eb:19:c3:
0e:6b:12:3c:b5:2f:52:cc:1b:dc:eb:f1:d0:ba:92:
a5:0d:e8:a9:f6:19:ec:74:65:98:f8:47:98:71:49:
b4:7e:8c:cc:b1:1d:d3:19:3f:ff:32:39:ea:e3:d0:
70:96:31:e3:dd:1c:75:2a:48:e6:ae:9a:37:82:bd:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F4:F0:7C:42:60:9A:B1:82:2B:67:58:3E:19:C3:18:58:7A:59:D8
X509v3 Authority Key Identifier:
keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5e:02:30:21:bc:cf:82:71:f7:27:15:5e:43:d3:4d:a9:ab:
db:d9:fa:46:9e:e1:09:e6:fc:6c:b7:da:d8:ba:59:10:21:8b:
75:a8:4e:28:d5:dc:98:34:fc:a0:81:7e:eb:c3:23:bf:bb:49:
98:88:9d:53:1b:d8:00:b3:a9:8f:e0:6a:ab:d8:df:a1:b0:56:
39:98:a7:24:3d:27:45:21:2a:b7:de:66:1d:27:c8:ff:52:fb:
bc:32:06:e8:45:71:fc:4e:de:20:3f:48:80:a8:79:2c:2b:56:
b0:02:32:17:cc:cb:30:d0:9a:29:00:4a:d0:d7:dc:af:3a:e6:
bc:4c:20:ff:c1:93:72:80:15:46:3e:fa:f0:72:b7:56:9e:49:
3b:cc:c1:cc:da:e3:29:19:43:48:3e:8a:d9:e8:10:15:97:24:
3f:d1:ae:42:95:3f:ef:13:af:d9:c0:3a:9c:b3:40:28:c5:ce:
88:d2:ad:5a:7d:66:e0:16:5f:98:ff:02:0f:4f:26:c2:de:4d:
3e:1f:fc:30:15:08:8e:5e:c7:93:8f:d2:53:b3:35:80:98:c8:
69:46:67:8f:36:46:1b:70:4d:b4:3c:01:49:3c:55:dc:ec:09:
1e:73:21:bf:ac:15:72:de:cb:cc:11:71:b9:f2:cf:67:79:7b:
2e:98:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:34:07 2026 by rpki-client